2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-46954 | CRITICAL | 9.8 | 1.1% | Nov 3, 2023 | SQL Injection vulnerability in Relativity ODA LLC RelativityOne v.12.1.537.3 Patch 2 and earlier allows a remote attacke... |
| CVE-2023-46958 | CRITICAL | 9.8 | 1.3% | Nov 2, 2023 | An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file. |
| CVE-2023-42299 | CRITICAL | 9.8 | 1.3% | Nov 2, 2023 | Buffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and caus... |
| CVE-2023-31579 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json ... |
| CVE-2023-5846 | CRITICAL | 9.8 | 0.3% | Nov 2, 2023 | Franklin Fueling System TS-550 versions prior to 1.9.23.8960 are vulnerable to attackers decoding admin credentials, re... |
| CVE-2023-45347 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_verifie... |
| CVE-2023-45346 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_role' p... |
| CVE-2023-45345 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_deleted... |
| CVE-2023-45338 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' param... |
| CVE-2023-45344 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_balance... |
| CVE-2023-45343 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticket_id... |
| CVE-2023-45342 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' pa... |
| CVE-2023-45341 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_price' ... |
| CVE-2023-45340 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' pa... |
| CVE-2023-45336 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password'... |
| CVE-2023-45334 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'status' p... |
| CVE-2023-45325 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' ... |
| CVE-2023-45323 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' par... |
| CVE-2023-42802 | CRITICAL | 9.8 | 0.8% | Nov 2, 2023 | GLPI is a free asset and IT management software package. Starting in version 10.0.7 and prior to version 10.0.10, an unv... |
| CVE-2023-5918 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected i... |
| CVE-2023-47204 | CRITICAL | 9.8 | 0.8% | Nov 2, 2023 | Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python ... |
| CVE-2023-45019 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' p... |
| CVE-2023-45018 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' p... |
| CVE-2023-45015 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' param... |
| CVE-2023-45012 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_email'... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now